Oct  6 13:55:47 kmh-mb-001 sshd[14337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217  user=r.r
Oct  6 13:55:49 kmh-mb-001 sshd[14337]: Failed password for r.r from 106.12.48.217 port 34176 ssh2
Oct  6 13:55:49 kmh-mb-001 sshd[14337]: Received disconnect from 106.12.48.217 port 34176:11: Bye Bye [preauth]
Oct  6 13:55:49 kmh-mb-001 sshd[14337]: Disconnected from 106.12.48.217 port 34176 [preauth]
Oct  6 14:04:46 kmh-mb-001 sshd[14996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217  user=r.r
Oct  6 14:04:48 kmh-mb-001 sshd[14996]: Failed password for r.r from 106.12.48.217 port 52842 ssh2
Oct  6 14:04:48 kmh-mb-001 sshd[14996]: Received disconnect from 106.12.48.217 port 52842:11: Bye Bye [preauth]
Oct  6 14:04:48 kmh-mb-001 sshd[14996]: Disconnected from 106.12.48.217 port 52842 [preauth]
Oct  6 14:10:44 kmh-mb-001 sshd[15264]: pam_unix(sshd:auth): authenticat........
-------------------------------

xmlrpc attack

Aug 10 21:06:03 dallas01 sshd[2815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.115.37
Aug 10 21:06:05 dallas01 sshd[2815]: Failed password for invalid user aba from 220.133.115.37 port 58198 ssh2
Aug 10 21:10:53 dallas01 sshd[3940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.115.37

2019-10-08T14:04:34.821106abusebot-8.cloudsearch.cf sshd\[21170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.56.82.194  user=root

Oct  6 13:08:48 new sshd[30526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-34-222-182-9.us-west-2.compute.amazonaws.com  user=r.r
Oct  6 13:08:50 new sshd[30526]: Failed password for r.r from 34.222.182.9 port 40458 ssh2
Oct  6 13:08:50 new sshd[30526]: Received disconnect from 34.222.182.9: 11: Bye Bye [preauth]
Oct  6 13:18:49 new sshd[795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-34-222-182-9.us-west-2.compute.amazonaws.com  user=r.r
Oct  6 13:18:51 new sshd[795]: Failed password for r.r from 34.222.182.9 port 59314 ssh2
Oct  6 13:18:52 new sshd[795]: Received disconnect from 34.222.182.9: 11: Bye Bye [preauth]
Oct  6 13:22:49 new sshd[2028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-34-222-182-9.us-west-2.compute.amazonaws.com  user=r.r
Oct  6 13:22:51 new sshd[2028]: Failed password for r.r from 34.222.182.9 port 45........
-------------------------------

Automatic report - Port Scan Attack

Oct  8 05:27:00 kapalua sshd\[20384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.179  user=root
Oct  8 05:27:02 kapalua sshd\[20384\]: Failed password for root from 119.29.216.179 port 53344 ssh2
Oct  8 05:30:40 kapalua sshd\[20711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.179  user=root
Oct  8 05:30:42 kapalua sshd\[20711\]: Failed password for root from 119.29.216.179 port 51124 ssh2
Oct  8 05:34:12 kapalua sshd\[20979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.179  user=root

(from noreply@business-loan-funding.pro) Hi, letting you know that http://Business-Loan-Funding.pro?url=ocfrw.org can find your business a SBA or private loan for $2,000 - $350K Without high credit or collateral. 
 
Find Out how much you qualify for by clicking here: 
 
http://Business-Loan-Funding.pro?url=ocfrw.org 
 
Minimum requirements include your company being established for at least a year and with current gross revenue of at least 120K. Eligibility and funding can be completed in as fast as 48hrs. Terms are personalized for each business so I suggest applying to find out exactly how much you can get on various terms. 
 
This is a free service from a qualified lender and the approval will be based on the annual revenue of your business. These funds are Non-Restrictive, allowing you to spend the full amount in any way you require including business debt consolidation, hiring, marketing, or Absolutely Any Other expense. 
 
If you need fast and easy business funding take a look at these program

Received: from inulogic.fr (unknown [195.231.4.149])
Subject: Activation du service CLE DIGITALE.
From: BNP PARIBAS 
Content-ID: 
X-ME-bounce-domain: orange.fr
X-ME-Entity: vlaX-Mailer: PHP
Message-Id: <20191008101102.AAB894497D@inulogic.fr>
https://teedin3d.com
Tel: 05 62 66 24 57
Geneviève Lacassagne : 06 70 34 50 79

SSH bruteforce

" "

2019-10-08T15:06:21.258715abusebot-4.cloudsearch.cf sshd\[24333\]: Invalid user Chicago123 from 178.62.79.227 port 58514

xmlrpc attack

Apr 29 21:10:07 ubuntu sshd[9082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.158.148.132
Apr 29 21:10:09 ubuntu sshd[9082]: Failed password for invalid user service from 220.158.148.132 port 58140 ssh2
Apr 29 21:12:02 ubuntu sshd[9117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.158.148.132
Apr 29 21:12:04 ubuntu sshd[9117]: Failed password for invalid user shozi from 220.158.148.132 port 45358 ssh2

Oct  8 13:33:15 localhost sshd\[18976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.139.201  user=root
Oct  8 13:33:17 localhost sshd\[18976\]: Failed password for root from 182.18.139.201 port 48672 ssh2
Oct  8 13:55:02 localhost sshd\[19333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.139.201  user=root
...